#teamcity — Public Fediverse posts

Dew Drop – May 13, 2026 (#4667)

https://fed.brid.gy/r/https://alvinashcraft.com/2026/05/13/dew-drop-may-13-2026-4667/

📰 High-Severity Flaw in JetBrains TeamCity On-Premises Allows API Exposure (CVE-2026-44413)

PATCH NOW: A high-severity vulnerability (CVE-2026-44413) in JetBrains TeamCity On-Premises allows any authenticated user to expose server APIs. All versions up to 2025.11.4 are affected. Upgrade to 2026.1 immediately. 💻🔧 #TeamCity #JetBrains #CI/CD

🔗 https://cyber.netsecops.io

Angriffe auf Cisco SD-WAN, #Zimbra, #TeamCity, #PaperCut und mehr beobachtet | Security https://www.heise.de/news/Angriffe-auf-Cisco-SD-WAN-Zimbra-TeamCity-PaperCut-und-mehr-beobachtet-11265225.html #Patchday #XSS #CrossSiteScripting #exploit

BlorboBash attack for @TabooTerrific

jirai kei and ryousangata Kuromi x My Melody

#BlorboBash2026 #BlorboBash #TeamCity #creativeclash #sanrio #mymelody #kuromi #MaricoDraws

BlorboBash attack for @TabooTerrific

jirai kei and ryousangata Kuromi x My Melody

#BlorboBash2026 #BlorboBash #TeamCity #creativeclash #sanrio #mymelody #kuromi #MaricoDraws

BlorboBash attack for @pandemonicangel

#BlorboBash2026 #BlorboBash #CreativeClash #TeamCity #ffxiv #MaricoDraws

BlorboBash attack for @pandemonicangel

#BlorboBash2026 #BlorboBash #CreativeClash #TeamCity #ffxiv #MaricoDraws

BlorboBash attack for @pandemonicangel

#BlorboBash2026 #BlorboBash #CreativeClash #TeamCity #ffxiv #MaricoDraws

BlorboBash attack for @pandemonicangel

#BlorboBash2026 #BlorboBash #CreativeClash #TeamCity #ffxiv #MaricoDraws

BlorboBash attack for @pandemonicangel

#BlorboBash2026 #BlorboBash #CreativeClash #TeamCity #ffxiv #MaricoDraws

BlorboBash attack for @pandemonicangel

#BlorboBash2026 #BlorboBash #CreativeClash #TeamCity #ffxiv #MaricoDraws

Dew Drop – February 25, 2026 (#4612)

https://fed.brid.gy/r/https://alvinashcraft.com/2026/02/25/dew-drop-february-25-2026-4612/

If all goes well with my irl situation atm, I'm in Team City for this year's BlorboBash. :catto_blush:​

#BlorboBash2026 #Creativeclash #TeamCity #MaricoDraws #Maricopium

Dew Drop – January 23, 2026 (#4589)

https://fed.brid.gy/r/https://alvinashcraft.com/2026/01/23/dew-drop-january-23-2026-4589/

Dew Drop – January 13, 2026 (#4581)

https://fed.brid.gy/r/https://alvinashcraft.com/2026/01/13/dew-drop-january-13-2026-4581/

Dew Drop – December 29, 2025 (#4570)

https://fed.brid.gy/r/https://alvinashcraft.com/2025/12/29/dew-drop-december-29-2025-4570/

Dew Drop – December 16, 2025 (#4562)

https://fed.brid.gy/r/https://alvinashcraft.com/2025/12/16/dew-drop-december-16-2025-4562/

Dew Drop – December 8, 2025 (#4556)

https://fed.brid.gy/r/https://alvinashcraft.com/2025/12/08/dew-drop-december-8-2025-4556/

Dew Drop – November 28, 2025 (#4550)

https://fed.brid.gy/r/https://alvinashcraft.com/2025/11/28/dew-drop-november-28-2025-4550/

Трендовые уязвимости марта: обновляйтесь и импортозамещайтесь

Хабр, привет! Я Александр Леонов, и мы с командой аналитиков Positive Technologies каждый месяц изучаем информацию о недостатках безопасности из баз, бюллетеней безопасности вендоров, социальных сетей, блогов, телеграм-каналов, баз эксплойтов, публичных репозиториев кода и определяем трендовые уязвимости. То есть те, которые либо уже эксплуатируются вживую, либо могут начать эксплуатироваться в ближайшее время. Сегодня расскажу про самые опасные в марте — всего их было пять. Какие уязвимости были в тренде в марте

https://habr.com/ru/companies/pt/articles/806519/

#vulnerability_management #cve #трендовые_уязвимости #удаленное_выполнение_кода #повышение_привилегий #внедрение_sqlкода #teamcity #microsoft #ядро_windows #forticlient_ems

JetBrains TeamCity CI/CD CVE-2024-27198

В феврале 2024 года группа исследователей уязвимостей Rapid7 выявила уязвимость, затрагивающую сервер JetBrains TeamCity CI/CD и представляющую собой обход аутентификации в веб-компоненте TeamCity. Уязвимость получила идентификатор CVE-2024-27198 и балл CVSS равный 9,8 (критический). Наличие данного недостатка позволяет полностью скомпрометировать сервер TeamCity, не имея аутентифицированного доступа, включая удаленное исполнение команд. Компрометация сервера TeamCity позволяет злоумышленнику получить полный контроль над всеми проектами, сборками, агентами и артефактами TeamCity, что может являться подходящим вектором для атаки на цепочку поставок.

https://habr.com/ru/articles/802293/

#CVE202427198 #teamcity #jetbrains #уязвимость #authentication_bypass

Exploitation of CVE-2024-27198 (9.8, disclosed on 04 March 2024 by JetBrains, has Proof of Concept, in KEV Catalog 07 March 2024: auth bypass in TeamCity) has been observed by Trend Micro to drop Jasmin ransomware, XMRig cryptocurrency miner, SparkRAT backdoor, and Cobalt Strike beacons. MITRE ATT&CK TTPs and IOC provided. 🔗 https://www.trendmicro.com/en_us/research/24/c/teamcity-vulnerability-exploits-lead-to-jasmin-ransomware.html

#CVE_2024_27198 #KEV #CISA #JetBrains #TeamCity #vulnerability #eitw #activeexploitation #ransomware #threatintel #Jasmin #XMrig #cryptomining #SparkRAT #CobaltStrike #IOC #threatintel #proofofconcept

"🚨 Urgent TeamCity Vulnerabilities Alert! Patch Now! 🚨"

JetBrains has just patched critical vulnerabilities in TeamCity On-Premises software, tagged CVE-2024-27198 and CVE-2024-27199, with alarming CVSS scores of 9.8 and 7.3. These flaws allow unauthorized access to potentially gain full control over the TeamCity servers. Versions up to 2023.11.3 are affected, urging an immediate update to v2023.11.4. Kudos to Rapid7 for the timely discovery on Feb 20, 2024. Given past abuses by notorious APT groups, securing your systems against such authentication bypasses is crucial to thwart potential supply chain assaults. 🛡️💻

🔗 Source: BleepingComputer

Tags: #JetBrains #TeamCity #CyberSecurity #VulnerabilityAlert #CVE2024-27198 #CVE2024-27199 #Rapid7 #PatchNow #SupplyChainSecurity #AuthenticationBypass #InfoSec

🌍🔐👥

#TeamCity: If your company/#DevOps team is using Team City, you need to patch it immediately as vulnerability CVE-2024-27198 allows for a complete compromise of a vulnerable TeamCity server by a remote unauthenticated attacker:
#AuthBypass

https://www.rapid7.com/blog/post/2024/03/04/etr-cve-2024-27198-and-cve-2024-27199-jetbrains-teamcity-multiple-authentication-bypass-vulnerabilities-fixed/

Två nya allvarliga sårbarheter har identifierats i JetBrains TeamCity: https://kryptera.se/tva-nya-allvarliga-sarbarheter-i-teamcity/

#teamcity #cicd #vulnerability #cybersecurity #cybersäkerhet #itsäkerhet #jetbreains

Exploitation of TeamCity typically results in code execution with high privileges, providing the SVR a strategic foothold in the network environment.

#Cybersecurity #APT29 #Cyberattacks #Russia #HackerGroup #TeamCity #Exploits

https://cybersec84.wordpress.com/2023/12/15/apt29-hackers-exploit-unpatched-jetbrains-teamcity-servers-for-ongoing-threats/

Currently running Jenkins but kind of hate it and every three months or so I start googling alternatives until I feel that it _does_ actually do what we need and I don't feel like setting up something new that's probably just as horrible.

Having a look at TeamCity though and it does seem to check a lot of the right boxes. What say ye? Yay? Nay?

#softwareengineering #BuildAutomation #ci #teamcity #jetbrains